Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa
File:                     f2b077cd-d186-3936-925e-32f55f22c55b.roa (raw, json)
Hash identifier:          Edvu7ahHWLq2zm15cD1X4vbpCwiwccAOrxfw7Yb13Dk=
Subject key identifier:   D1:4A:C4:CC:70:26:42:43:CF:5D:C2:39:29:99:E1:CB:A4:57:9D:C5
Certificate issuer:       /CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
Certificate serial:       010D0C9F4328584B05E1400640CFB49ADF1046C0
Authority key identifier: F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa
Signing time:             Sat 30 Aug 2025 01:00:34 +0000
ROA not before:           Sat 30 Aug 2025 01:00:34 +0000
ROA not after:            Fri 28 Nov 2025 02:00:34 +0000
asID:                     32688
IP address blocks:        168.245.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:05:e1:40:06:40:cf:b4:9a:df:10:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec087a-afbe-4e15-92d3-ababccc0bbe0
        Validity
            Not Before: Aug 30 01:00:34 2025 GMT
            Not After : Nov 28 02:00:34 2025 GMT
        Subject: CN=cb0ad19d-033c-40ba-aaae-bde2e9be0ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:38:c1:fd:d6:b4:6e:5f:5f:a5:c3:b7:1c:
                    82:70:42:5e:7b:9d:7e:c2:76:e5:de:d1:19:7a:61:
                    0c:cc:04:02:5d:66:20:c7:0b:a6:42:9f:99:52:1a:
                    ae:01:f1:77:df:5d:06:b9:ad:0f:64:56:45:ef:17:
                    5e:06:4e:0f:71:17:d2:fb:ce:8f:43:ed:0b:35:90:
                    7d:c7:42:0d:cc:89:f6:45:04:10:fe:bb:83:ac:c1:
                    04:13:f4:2c:31:49:92:9b:ef:de:45:2c:0a:59:b1:
                    56:85:93:13:9f:38:28:c9:f9:9b:b1:8f:84:ce:fc:
                    fc:56:45:d8:d7:b3:24:b7:5c:b1:30:6d:fa:77:fe:
                    84:9c:de:4b:a0:26:88:58:64:ed:c4:e1:b1:15:5c:
                    29:16:f1:ad:66:47:f0:bd:45:9d:3d:1e:7e:d6:ff:
                    e4:b7:e0:26:44:95:18:2a:89:71:a3:e8:df:c2:04:
                    b0:40:21:ee:cf:60:d1:9c:2f:1b:67:67:c9:ae:b2:
                    b2:ce:29:f4:9c:b3:16:2f:c6:eb:e0:a1:79:f7:4d:
                    7a:3a:46:6a:3b:18:e8:43:56:4a:77:53:18:33:aa:
                    8d:77:09:2f:ff:4d:0e:68:f2:91:ba:06:fe:ae:6e:
                    9a:80:d3:37:b5:c8:e4:45:01:2e:e4:52:a8:51:6b:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:C4:CC:70:26:42:43:CF:5D:C2:39:29:99:E1:CB:A4:57:9D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/f2b077cd-d186-3936-925e-32f55f22c55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.crl

            X509v3 Authority Key Identifier:
                keyid:F7:09:2F:B9:C4:2D:7E:01:35:91:1E:A9:DD:ED:D5:EB:B6:9B:82:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e7ec087a-afbe-4e15-92d3-ababccc0bbe0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f9:49:80:43:70:d2:6b:b4:ad:f7:36:fa:d4:a7:c0:9d:8d:
         35:2a:7d:5e:e5:a2:00:db:62:84:a0:da:ce:7f:7d:4f:05:3d:
         6e:a0:17:25:36:cb:8c:6d:94:18:85:a8:f5:13:cd:59:5a:10:
         fd:b1:bc:b2:bf:76:18:63:60:9b:2c:06:7e:22:9a:c1:e6:fc:
         93:9c:78:7c:1a:c9:f0:3e:cf:2f:82:4d:c4:39:bf:fc:5e:27:
         6f:eb:df:10:52:89:d2:86:44:4e:a2:de:19:10:a6:ce:21:12:
         5c:11:f6:f4:23:00:07:cc:4a:3a:bc:7c:57:5c:01:9d:db:34:
         92:4b:44:55:45:02:bf:93:cd:7d:64:ad:de:b5:1d:de:c5:98:
         fb:37:15:1e:de:1e:bb:78:d2:e1:b4:97:e2:fb:91:1d:73:c8:
         6f:54:31:6e:16:e3:08:0b:56:d8:2b:7c:d6:97:c2:5e:eb:96:
         87:0b:66:79:11:44:14:ec:ba:32:d5:32:ab:20:a8:e0:87:2c:
         ce:59:06:99:db:ed:25:44:28:d6:b5:ff:79:b6:c7:b9:86:80:
         ba:58:9f:ce:b8:f8:22:a7:74:ec:b3:17:8f:9e:93:3f:61:46:
         30:63:e3:bf:fd:6c:c1:74:ed:3f:b7:a6:e7:f0:41:8d:ec:96:
         12:c9:f7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:10:46 2025 by rpki-client